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[Description] 

Field of the Invention 

The present invention relates to the .encryption and 
decryption of audio and/or video signals and, in 
particular, to a flexible concept for custom-selective 
provision of audio and/or video signals. 



Background of the Invention and Prior Art 



With the widespread availability of the Internet in 
connection with hearing-adapted audio encoding methods, a 
simple worldwide distribution of high-quality audio signals 
has become possible. In particular, this has lead to a 
worldwide wave of music piracy, wherein people for example 
encode purchased CD music according to the standard MPEG 
layer-3 (MP3) and place it illegally on the World Wide Web 
(WWW) . According to estimates, about 10 million downloads 
of music is exchanged in a day, without the holders of the 
corresponding copies and license rights having authorised 
same or having received the respective payments therefore. 
This has lead to great concern in the music industry. 

Nowadays, there are, in particular, many constrains 
concerning the situation of music distribution. Firstly, a 
wide spread know-how concerning the audio compression 
technology exists, manifested, for example, in the standard 
MPEG layer-3 (MP3) , Additionally, software encoders, 
software decoders and MP3-players (for example, mp3enc, 
13enc, WinPlay3) and other formats run on a number of 



operating systems, including the Windows operating system. 

Furthermore, many Internet locations exist offering MP3- 

music that has often been placed there without 
authorisation . 



Apart from the software encoders and decoders, hardware 
players exist as well, for example, MPLayer3, MP-Man, Rio, 
etc., that are able to play MP3 pieces that have either 
been encoded from a CD or are files that have been 
downloaded from the Internet. These players have, so far, 
no implemented protection techniques for enforcing copy or 
license rights. Additionally, devices for writing to CD- 
ROMs exist that are able to write to audio CDs and MPS CD- 
ROMs. Meanwhile, these devices are offered to prices that 
have lead to a wide spread availability. Furthermore, the 
prices for high-volume hard discs have fallen, which is why 
most Internet participants have almost unlimited memory 
capacities- Finally, we want to point out the tendency that 
transmission costs for files keep falling. 

While in the above hardware players no protection 
techniques have been implemented, there are still several 
techniques for protecting audio and/or video data (i.e. 
multimedia data, naming, for example, the multimedia 
protection protocol MMP. This technology represents a so- 
called "Secure Envelope" technique. 

DE 196 25 625 CI describes such a technique for encrypting 
and decrypting of multimedia data. Data encoded according 
to an audio or video standard are encrypted at least partly 
via, for example, a DES encryption method (DES = Data 
Encryption Standard) and written into a payload data block. 
The payload data block is provided with a determination 
data block comprising, apart from a plurality of further 
information, also information concerning the encryption 
algorithm used with the encryption as well as the key 
needed therefore. The key comprises user information such 
that only a specific user who is authorised for playing a 




piece of multimedia, for example, by purchase or licensing 
can decrypt the piece. A player that does not have the 
correct key will stop operating as soon as it encounters 
the encrypted multimedia data. Thereby, the objective that 
5 only the authorised user can play a piece of multimedia is 
achieved. This Secure Envelope technique therefore 
represents a two level method wherein a piece of multimedia 
is encoded first in order to obtain a significant data 
compression and wherein then a cryptographical algorithm is 
10 used in order to defend the encoded piece of multimedia 
against unauthorised attackers. 

For applications that do not require such maximum 
protection, the described concept is disadvantageously in 

15 that it can become relatively expensive and can require 
significant modifications to players in order to be able to 
process the determination data block. The players that are 
mass products in the consumer area after all, and therefore 
have to be offered inexpensively should, however, if 

20 possible, not having to be changed at all in order to be 
able to play protected pieces of multimedia. Thus, it has 
to be noted that the known encryption concept makes a 
maximum protection and a high encryption flexibility 
possible by respectively designing the start block, but 

25 that, however, distinctive changes with the players are 
necessary in order to decrypt encrypted files or to read 
them at all. 



U.S. Patent No. 5,796,838 discloses a method and an 



apparatus 


for carrying out an inversion of a frequency 


spectrum. 


The inversion of the frequency spectrum is 


achieved 


by converting a non-encrypted audio signal from 


analog to 


digital. The audio signal is then subjected to a 


positive 


complex frequency translation such that the 


negative 


frequency components of the audio signal will be 


positioned at around 0 Hz. The audio signal converted 


regarding 


to its frequency will then be low-pass filtered. 


so that 


only the base band components are left. The 



I 

i 



filtered complex base band signal will then be subjected to 
an arbitrary complex frequency displacement in order to 
position the signal frequency in a desired frequency band. 
The resulting signal has an inverted spectrum relative to 
5 the original audio signal. Extracting the real part of the 
complex samples will generate the final audio signal. 

U.S. Patent No. 4,534,037 discloses a method and an 
apparatus for a scrambled pulse code modulation 

10 transmission or recording. In order to emphasise special 
spectral components of a seguence of digital signals that 
have been transmitted or recorded in pulse code words, 
"repacked" words are established comprising one or several 
bits of a word of the original sequence and a complementary 

15 number of bits of the following word. The bits of a word 
out of which a "repacked" word consists of will be inverted 
prior to repacking such that, for example, the fourfold 
sampling frequency, the double sampling frequency or the 
sampling frequency itself can be emphasised in the 

20 spectrum. It is possible to transform the frequency 
spectrum downward regarding to the frequency without 
inversion of words. 



2 5 Summary of the Invention 

It is the object of the present invention to provide a 
different concept for decrypting and encrypting audio 
and/or video signals, respectively. 

30 

This — object — — achieved — by — a« — apparatus — &eHe — generating — enpt 
encrypted data — stream according — te — claims — 1-7 — 3r^7 — e*^ — 1-8 — by an 
apparatus — — generating — a — decrypted data — stream according 
to — claims — 1-9 — — S^-^ — — a method — — generating — enri — encrypted 

3 5 data — stream — according — tre — claim — 2-9 — and — by — a — method — for 

generating a — decrypted data — stream according — t-e — claim 30. 
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In accordance with a first aspect of the present invention, 
this object is achieved by an apparatus for generating an 
encrypted data stream from an audio signal, comprising: an 
encoder for encoding the audio signal in order to generate 
5 a data stream with a predefined data stream syntax as 
output signal; an encryption means coupled with the encoder 
for influencing encoder internal data in a uniquely 
reversible manner based on a key such that the generated 
encrypted data stream comprises payload information 

10 differing from payload information of a data stream that 
would be generated by the apparatus without the presence of 
the encryption means and that the generated encrypted data 
stream comprises the predefined data stream syntax, wherein 
said encoder is an encoder for audio signals, comprising: 

15 an analysis filter bank for converting the audio signal 
from the time domain into a spectral representation in 
order to obtain spectral values; a quantizing means for 
quantizing the spectral values under consideration of a 
psychoacoustic model; and an entropy encoder arranged to 

2 0 carry out an entropy encoding of the quantized spectral 
values via a plurality of predefined code tables wherein 
each code table for the entropy encoding of quantized 
spectral values is provided in a frequency band and wherein 
at least one frequency band comprises two or more quantized 

2 5 spectral values, and wherein said encryption means is 
arranged to resort the two or more quantized spectral 
values in the frequency band comprising two or more 
quantized spectral values having an associated code table 
based on the key. 

30 

In accordance with a second aspect of the present 
invention, this object is achieved by an apparatus for 
generating a data stream encrypted based on a second key 
from a first data stream encrypted based on a first key, 
35 wherein said first data stream is an audio signal encoded 
by using an encoder with a predefined data stream syntax, 
wherein said first data stream is encrypted such that that 
two or more quantized spectral values in a frequency band 



6 - 



comprising two or more quantized spectral values and having 
an associated code table have been resorted based on the 
first key, wherein after the resorting an entropy encoding 
of the quantized spectral values has been carried out via a 
5 plurality of predefined code tables, wherein each code 
table is provided for the entropy encoding of quanti^zed 
spectral values in a frequency band and wherein at least 
one frequency band comprises the two or more quantized 
spectral values,, comprising: a partial decoder for 
reversing part of the encoding such that the resorted two 
or more spectral values are present; a decryption means for 
decrypting the resorted two or more spectral values by 
reversing the resorting based on the first key; an 
encryption means for influencing the sequence of the two or 
more spectral values of the frequency band that has an 
associated code table based on the second key; a partial 
encoder for carrying out part of the encoding that has been 
reversed by the partial decoder in order to generate the 
data stream encrypted based on the second key, wherein the 
second data stream has the predefined data stream syntax. 

In accordance with a third aspect of the present invention, 
this object is achieved by an apparatus for generating a 
second data stream encrypted based on a key from a data 
25 stream, wherein said first data stream is an audio signal 
encoded using an encoder with a predefined data stream 
syntax, comprising: a partial decoder for reversing part of 
the encoding such that quantized spectral values of the 
audio signal are present; an encryption means for resorting 
30 two or more quantized spectral values in a frequency band 
comprising two or more spectral values based on the first 
key, wherein one of a plurality of predefined code tables 
is associated to the frequency band for the entropy 
encoding, wherein each code table is provided for an 
35 entropy encoding of quantized spectral values in a 
frequency band and wherein at least one frequency band 
comprises the two or more quantized spectral values, 
wherein the encryption means is arranged to resort the 
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quantized spectral values that have the same associated 
code table; a partial encoder for carrying out part of the 
encoding that has been reversed by the partial decoder in 
order to generate the data stream encrypted based on the 
5 key, wherein the second data stream has the predefined data 
stream syntax. 

In accordance with a fourth aspect of the present 
invention, this object is achieved by an apparatus for 

10 generating a decrypted data stream from a first data stream 
encrypted based on a key, wherein said first data stream is 
an audio signal with a predefined data stream syntax 
encoded by using an encoder, wherein said first data stream 
is encrypted such that at least two or more quantized 

15 spectral values in a frequency band have been resorted 
based on the first key wherein a plurality of predefined 
code tables for an entropy encoding is associated with the 
frequency band whose quantized spectral values have been 
resorted, wherein each code table for the entropy encoding 

20 is provided for the entropy encoding of quantized spectral 
values in a frequency band and wherein at least one 
frequency band comprises the two or more quantized spectral 
values, comprising: a partial decoder for reversing part of 
the encoding such that the resorted two or more quantized 

25 spectral values are present, wherein the resorted two or 
more quantized spectral values belong to a frequency band 
that has an associated code table; a decryption means for 
decrypting the resorted two or more quantized spectral 
values by reversing the resorting based on the key; a 

30 partial encoder for carrying out part of the encoding that 
has been reversed by the partial decoder in order to 
generate the second data stream with the predefined data 
stream syntax, 

35 In accordance with a fifth aspect of the present invention, 
this object is achieved by an apparatus for generating a 
decrypted audio signal from an encrypted data stream 
comprising quantized spectral values of an audio signal 
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being resorted and afterwards entropy encoded within a 
frequency band in a uniquely reversible manner, wherein the 
frequency band is defined that it has an associated code 
table from a plurality of code tables for the entropy 
5 encoding, wherein the encrypted data stream comprises 
payload information differing from payload information of a 
non-encrypted data stream and wherein said encrypted data 
stream comprises the same data stream syntax as a non- 
encrypted data stream, comprising: a decoder for decoding 

10 input data in order to generate decoded output data, 
wherein the decoder comprises an entropy decoder for 
reversing the entropy encoding in order to obtain the 
resorted quantized spectral values; and a decryption means 
for influencing the resorted spectral values based on a key 

15 in order to reverse the uniquely reversible resorting which 
has been carried out in an apparatus for generating an 
encrypted data stream in order to obtain the decrypted 
audio and/or video signal. 

20 In accordance with a sixth aspect of the present invention, 
this object is achieved by a method for generating an 
encrypted data stream from an audio signal, comprising: 
encoding the audio signal in order to generate a data 
stream with a predefined data stream syntax as output 

25 signal; encrypting encoder internal data by influencing the 
same in a uniquely reversible manner based on a key such 
that the generated encrypted data stream comprises payload 
information differing from payload information of a data 
stream that would be generated without the step of 

30 encrypting and that the generated encrypted data stream 
comprises the predefined data stream syntax, wherein in the 
step of encoding an audio signal is encoded, comprising: 
converting the audio signal from the time domain into a 
spectral representation in order to obtain spectral values; 

35 quantizing the spectral values under consideration of a 
psychoacoustic model; and entropy encoding of the spectral 
values via a plurality of predefined code tables wherein 
each code table for the entropy encoding of quantized 




spectral values is provided in a frequency band and wherein 
at least one frequency band comprises two or more quantized 
spectral values, and wherein said step of encrypting is 
carried out to resort the two or more quantized spectral 
5 values in the frequency band comprising two or more 
quantized spectral values having an associated code tafele 
based on the key. 

In accordance with a seventh aspect of the present 

10 invention, this object is achieved by a method for 
generating a second data stream encrypted based on a second 
key from a first data stream encrypted based on a first 
key, wherein said first data stream is an audio signal with 
a predefined data stream syntax encoded by using an 

15 encoder, wherein said first data stream is encrypted such 
that two or more quantized spectral values in a frequency 
band comprising two or more quantized spectral values and 
having an associated code table have been resorted based on 
the first key, wherein after the resorting an entropy 

2 0 encoding of the quantized spectral values has been carried 
out via a plurality of predefined code tables, wherein each 
code table is provided for the entropy encoding of 
quantized spectral values in a frequency band and wherein 
at least one frequency band comprises the two or more 

2 5 quantized spectral values, comprising: reversing part of 
the encoding such that the resorted two or more spectral 
values are present; decrypting the resorted two or more 
spectral values by reversing the resorting based on the 
first key; encrypting by influencing the sequence of the 

30 two or more spectral values of the frequency band that has 
an associated code table based on the second key; carrying 
out the part of the encoding that has been reversed by the 
step of reversing in order to generate the data stream 
encrypted based on the second key, wherein the second data 

35 stream has the predefined data stream syntax. 

In accordance with an eighth aspect of the present 
invention, this object is achieved by a method for 
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generating a second data stream encrypted based on a key 
from a first data stream^ wherein said first data stream is 
an audio signal with a predefined data stream syntax 
encoded by using an encoder, comprising: reversing part of 
5 the encoding such that quantized spectral values of the 
audio signal are present; encrypting by resorting two' or 
more quantized spectral values in a frequency band 
comprising two or more spectral values based on the first 
key, wherein one of a plurality of predefined code tables 

10 is associated to the frequency band for the entropy 
encoding, wherein each code table is provided for an 
entropy encoding of quantized spectral values in a 
frequency band and wherein at least one frequency band 
comprises the two or more quantized spectral values, 

15 wherein the encryption means is arranged to resort the 
quantized spectral values that have the same associated 
code table; carrying out part of the encoding that has been 
reversed by the partial decoder in order to generate the 
data stream encrypted based on the key, wherein the second 

20 data stream has the predefined data stream syntax. 

In accordance with a ninth aspect of the present invention, 
this object is achieved by a method for generating a 
decrypted data stream from a first data stream encrypted 

25 based on a key, wherein said first data stream is an audio 
signal with a predefined data stream syntax encoded by 
using an encoder, wherein said first data stream is 
encrypted such that at least two or more quantized spectral 
values in a frequency band have been resorted based on the 

30 first key, wherein a plurality of predefined code tables 
for an entropy encoding is associated with the frequency 
band whose quantized spectral values have been resorted, 
wherein each code table for the entropy encoding of 
quantized spectral values is provided in a frequency band 

35 and wherein at least one frequency band comprises the two 
or more quantized spectral values, comprising: reversing 
part of the encoding such that the resorted two or more 
quantized spectral values are present, wherein the resorted 
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two or more quantized spectral values belong to the 
frequency band that has an associated code table; 
decrypting the resorted two or more quantized spectral 
values by reversing the resorting based on the key; 
5 carrying out part of the encoding that has been reversed by 
the step of reversing in order to generate the second data 
stream with the predefined data stream syntax. 

In accordance with a tenth aspect of the present invention, 

10 this object is achieved by a method for generating a 
decrypted audio signal from an encrypted data stream 
comprising quantized spectral values of an audio signal 
being resorted and afterwards entropy encoded within a 
frequency band in a uniquely reversible manner, wherein the 

15 frequency band is defined by having an associated code 
table from a plurality of code tables for the entropy 
encoding wherein the encrypted data stream comprises 
payload data differing from payload data of a non-encrypted 
data stream and wherein the encrypted data stream comprises 

20 the same data stream syntax as a non-encrypted data stream, 
comprising: decoding input data in order to generate 
decoded output data, wherein in the step of decoding an 
entropy encoding for reversing the entropy encoding is 
carried out in order to obtain the resorted quantized 

2 5 spectral values; and decrypting by influencing the resorted 
quantized spectral values based on a key in order to 
reverse the uniquely reversible resorting that has been 
carried out by generating an encrypted data stream in order 
to obtain the decrypted audio signal. 

30 

In accordance with an eleventh sixth aspect of the present 
invention, this object is achieved by an apparatus for 
generating an encrypted data stream from an audio signal, 
comprising: an encoder for encoding the audio signal in 
35 order to generate a data stream with a predefined data 
stream syntax as output signal; an encryption means coupled 
with the encoder for influencing encoder internal data of 
the encoder in a uniquely reversible manner based on a key 




such that the generated encrypted data stream comprises 
payload information differing from payload information of a 
data stream that would be generated by the apparatus 
without the presence of the encryption means and that the 
5 generated encrypted data stream comprises the predefined 
data stream syntax, wherein said encoder is an encoder -for 
audio signals, comprising: an analysis filter bank for 
converting the audio signal from the time domain into a 
spectral representation in order to obtain spectral values; 

10 a quantizing means for quantizing the spectral values under 
consideration of a psychoacoustic model; and an entropy 
encoder arranged to carry out an entropy encoding of the 
spectral values in order to obtain a sequence of code words 
wherein the sequence of code words represents an entropy 

15 encoded version of the audio signal, and wherein said 
encryption means is arranged to resort the sequence of code 
words by changing an order of code words based on the key. 

In accordance with a twelfth aspect of the present 

20 invention, this object is achieved by an apparatus for 
generating a data stream encrypted based on a second key 
from a first data stream encrypted based on a first key, 
wherein said first data stream is an audio signal with a 
predefined data stream syntax encoded using an encoder, 

25 wherein said first data stream is encoded such that a 
sequence of code words generated by entropy encoding of 
quantized spectral values has been resorted by changing an 
order of code words based on the first key, comprising: a 
partial decoder for reversing part of the encoding such 

30 that the resorted sequence of code words is present; a 
decryption means for reversing the resorting based on the 
first key; an encryption means for resorting the sequence 
of code words based on the second key by changing an order 
of code words; a partial encoder for carrying out part of 

35 the encoding that has been reversed by the partial decoder 
in order to generate the data stream encrypted based on the 
second key, wherein the second data stream has the 
predefined data stream syntax. 
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In accordance with a thirteenth aspect of the present 
invention, this object is achieved by an apparatus for 
generating a second data stream encrypted based on a key 
from a first data stream, wherein said first data stream is 
an audio signal with a predefined data stream syntax 
encoded by using an encoder, comprising: a partial decoder 
for reversing part of the encoding such that a sequence of 
code words generated by entropy encoding of quantized 
spectral values is present; an encryption means for 
resorting the sequence of code words based on the key by 
changing an order of code words; a partial encoder for 
carrying out part of the encoding that has been reversed by 
the partial decoder in order to generate the data stream 
encrypted based on the key, wherein the second data stream 
has the predefined data stream syntax. 

In accordance with a fourteenth aspect of the present 
invention, this object is achieved by an apparatus for 
generating a decrypted data stream from a first data stream 
encrypted based on a key, wherein said first data stream is 
an audio signal with a predefined data stream syntax 
encoded by using an encoder, wherein said first data stream 
is encrypted such that a sequence of code words generated 
by entropy encoding of quantized spectral values has been 
resorted by changing an order of code words based on the 
first key, comprising: a partial decoder for reversing part 
of the encoding such that the resorted sequence of code 
words is present; a decryption means for reversing the 
resorting of the sequence of code words based on the key; a 
partial encoder for carrying out part of the encoding that 
has been reversed by the partial decoder in order to 
generate the second data stream with the predefined data 
stream syntax. 

In accordance with a fifteenth aspect of the present 
invention, this object is achieved by an apparatus for 
generating a decrypted audio signal from an encrypted data 
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stream comprising a sequence of code words generated by 
entropy encoding of quantized spectral values resorted in a 
uniquely reversible manner by changing an order of the code 
words wherein the encrypted data stream comprises payload 
data differing from payload data of a non-encrypted data 
stream and wherein the encrypted data stream comprises t:he 
same data stream syntax as a non-encrypted data stream, 
comprising: a decoder for decoding input data in order to 
generate decoded output data; and a decryption means for 
influencing the resorted sequence of code words based on a 
key in order to reverse the resorting that has been carried 
out in an apparatus for generating an encrypted data stream 
in order to obtain the decrypted audio signal. 

In accordance with a sixteenth aspect of the present 
invention, this object is achieved by a method for 
generating an encrypted data stream from an audio signal, 
comprising: encoding the audio signal in order to generate 
a data stream with a predefined data stream syntax as 
output signal; encrypting by influencing encoder internal 
data in the step of encoding in a uniquely reversible 
manner based on a key such that the generated encrypted 
data stream comprises payload information differing from 
payload information of a data stream that would be 
generated by the apparatus without the presence of the 
encryption means and that the generated encrypted data 
stream comprises the predefined data stream syntax, wherein 
the step of encoding comprises: converting the audio signal 
from the time domain into a spectral representation in 
order to obtain spectral valOes; quantizing the spectral 
values under consideration of a psychoacoust ic model; and 
entropy encoding the spectral values in order to obtain a 
sequence of code words wherein the sequence of code words 
represents an entropy encoded version of the audio signal, 
and wherein in said step of encrypting based on the key the 
sequence of code words is resorted by changing an order of 
code words . 



In accordance with a seventeenth aspect of the present 
invention^ this object is achieved by a method for 
generating a data stream encrypted based on a second key 
from a first data stream encrypted based on a first key, 
5 wherein said first data stream is an encoded audio signal 
with a predefined data stream syntax, wherein said fi^rst 
data stream is encrypted such that a sequence of code words 
generated by entropy encoding quantized spectral values has 
been resorted by changing an order of code words based on 

10 the first key, comprising: reversing part of the - encoding 
such that the resorted sequence of code words is present; 
reversing the resorting based on the first key; decrypting 
by resorting the sequence of code words based on the second 
key; carrying out part of the encoding that has been 

15 reversed in the step of reversing in order to generate the 
data stream encrypted based on the second key, wherein the 
second data stream has the predefined data stream syntax. 

In accordance with an eighteenth aspect of the present 
20 invention, this object is achieved by a method for 
generating a second data stream encrypted based on a key 
from a first data stream, wherein said first data stream is 
an audio signal encoded using an encoder with a predefined 
data stream syntax, comprising: reversing part of the 
25 encoding such that a sequence of code words generated by 
entropy encoding of spectral values is present; encrypting 
by resorting the sequence of code words based on the key by 
changing an order of code words; carrying out part of the 
encoding that has been reversed by the step of reversing in 
30 order to generate the data stream encrypted based on the 
key, wherein said second data stream has the predefined 
data stream syntax. 

In accordance with a nineteenth aspect of the present 
35 invention, this object is achieved by a method for 
generating a decrypted data stream from a first data stream 
encrypted based on a key, wherein said first data stream is 
an encoded audio signal with a predefined data stream 
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syntax, wherein said first data stream is encrypted such 
that a sequence of code words generated by entropy encoding 
spectral values has been resorted based by changing an 
order of code words on a first key, comprising: reversing 
part of the encoding such that the resorted sequence of 
code words is present; decrypting by reversing l:he 
resorting of the sequence of code words based on the key; 
carrying out part of the encoding that has been reversed by 
the step of reversing in order to generate the second data 
stream with the predefined data stream syntax. 

In accordance with a twentieth aspect of the present 
invention, this object is achieved by an a method for 
generating a decrypted audio signal from an encrypted data 
stream comprising a sequence of code words generated by 
entropy encoding quantized spectral values resorted by 
changing an order of code words in a uniquely reversible 
way wherein the encrypted data stream comprises payload 
data differing from payload data of a non-encrypted data 
stream and wherein the encrypted data stream comprises the 
same data stream syntax as a non-encrypted data stream, 
comprising: decoding input data in order to generate 
decoded output data; and decrypting by influencing the 
resorted sequence of code words based on a key in order to 
reverse the resorting that has been carried out in 
generating an encrypted data stream in order to obtain the 
decrypted audio signal. 

The present invention is based on the knowledge that for 
the purpose of a flexible encryption or decryption, the 
"Secure Envelope" concept can be digressed and that a so- 
called "Soft Envelope" concept can serve to manage with 
very limited changes to already existing players. This has 
the advantage that the investments for new developments 
needed for sufficient encryption can be kept low. This is 
not achieved by employing an all-purpose encryption method 
that is applicable for any type of data, but by employing a 
special purpose encryption that is adapted for the specific 
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encoder or decoder. Especially with highly-compressing 
encoding methods like, for example, procedures according to 
the standard MPEG-1 and iyiPEG-2 including MPEG-2 AAC, so 
many changes are carried out at the data to be compressed 
that even small changes to internal data of the encoder 
and/or to the output data of the encoder are enough to,' at 
least, introduce a (reversible) quality deterioration of 
the audio and/or video signal at the output of an decoder 
that does not have any knowledge about the changes 
introduced in the encoder, whereby a "soft" encryption is 
achieved. According to the invention, only such changes are 
carried out that do not change the data stream syntax of 
the encoder. Thereby, an inventively encrypted data stream 
can easily be read-in by a decoder and decoded. Without 
knowledge about the ways of the encryption, i.e., without 
knowledge about the key the decoded output signal will then 
have a low quality. 

The significant advantage of the inventive concept is 
therefore that by the manner of intervening with the 
encoder internal data and/or with the output data of the 
encoder, a very easy encryption can be implemented, the 
same way as a very strong encryption wherein the output 
signal of a non-authorised decoder has hardly any 
similarity with the original signal at the input of the 
encoder. In comparison with all-purpose encryption methods, 
it is a significant advantage of the present invention that 
the apparatus for generating an encrypted data stream does 
not change the data stream syntax determined by the 
encoder. Thereby, no significant modifications are required 
at a decoder that is, as already mentioned, a mass article 
and has to be inexpensive and cheap. 

According to a preferred embodiment of the present 
invention, the influencing of the encoder internal data 
and/or the output data of the encoder are carried out by an 
encryption means, merely so intensive that a non-authorised 
decoder still provides output signals with a certain audio 
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and/or video quality. Thereby, a user of a non-authorised 
decoder can, at least, obtain a rough impression of the 
encrypted music what might bring him to buy an authorised 
version, i.e., the key, in order to reverse the influencing 
of the data that has been carried out in the apparatus for 
generating the encrypted data stream in an apparatus *for 
generating a decrypted data stream in order to obtain full 
audio and/or video quality. 

Another significant advantage of the present invention is 
that it is possible to encrypt audio and/or video signals 
in such a way that the encrypted data stream has exactly 
the same length as the non-encrypted and merely encoded 
data stream. If an encoder is implemented in such a way 
that it provides a data rate that corresponds, for example, 
exactly to the maximum data rate of an ISDN telephone line, 
a real time transmission of the encoded non-encrypted data 
stream becomes possible. If an encryption method generated 
a longer data stream, a real time transmission over this 
ISDN line would not be possible. 

Therefore, the present invention provides an encryption or 
decryption concept wherein the data stream syntax 
determined by the encoder is not changed anywhere. For this 
reason, such an encryption or decryption concept provides a 
maximum flexibility, since a decoder can always decode an 
encrypted data stream based on the maintained data stream 
syntax. However, dependent on the data influencing in the 
decryption means, only a very light or a very strong 
encryption can be achieved in such a way that a non- 
authorised listener can either get a relatively good 
impression of the encrypted data or a very bad or no 
impression at all of the encrypted data. Based on the fact 
that the data stream syntax predefined by the encoder is 
not touched by the encryption, no particularly large 
changes to existing players, i.e., decoders, are necessary 
in order to be able to implement the inventive concept. 
This property is significant, since a multimedia data 
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protection concept, i.e., a protection concept for audio 
and/or video data, will only find acceptance at the market 
if it can be implemented without significant cost and is 
easy to operate. 

5 

Finally, the inventive concept has commercial appeal, since 
all existing decoders can be used for decoding, which is 
why users of existing decoders can listen to encrypted 
pieces with reduced quality and can thereby perhaps be 
10 motivated for the purchase of the key or the purchase/the 
licensing of an inventive apparatus for generating a 
decrypted data stream in order to be able to enjoy the full 
audio and/or video quality. 
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Brief Description of the Drawings 



Preferred embodiments of the present invention will be 
discussed in detail below with reference to the 
20 accompanying drawings. They show: 

Fig. 1 a schematic block diagram of an inventive 
apparatus for generating an encrypted data stream 
from an audio and/or video signal; 



Fig. 2 a schematic block diagram of an inventive 
apparatus for generating an audio and/or video 
signal as decrypted data stream; 



30 Fig. 3 an embodiment of an inventive apparatus for 
generating an encrypted data stream comprising an 
audio decoder according to the standard MPEG 
layer-3 or MPEG-2 AAC; 



35 Fig. 4 



an apparatus for generating 
stream according to a further 
present invention comprising 



an encrypted data 
embodiment of the 
an audio encoder 
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according to the standard MPEG layer-3 or the 
standard MPEG-2 AAC; 

Fig. 5 an apparatus for generating a decrypted audio 
5 and/or video signal according to a further 

embodiment of the present invention that ' is 
complementary to the apparatus for generating an 
encrypted data stream of Fig, 3; 

10 Fig. 6 an apparatus for generating a decrypted audio 
and/or video signal according to a further 
embodiment of the present invention that is 
complementary to the apparatus for generating an 
encrypted data stream of Fig. 4; 

15 

Fig. 7 an apparatus for generating an encrypted data 
stream according to a further embodiment of the 
present invention in order to convert a data 
stream encrypted with a first key into a data 
stream encrypted with a second key; 
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Fig, 8 an apparatus for generating an encrypted data 
stream according to a further embodiment of the 
present invention in order to convert an 
2^ encoded/non-encrypted data stream into an 

encoded/encrypted data streams- 
Fig. 9 an apparatus for generating an decrypted data 
stream according to a further embodiment of the 
30 present invention in order to convert and 

encoded/encrypted data stream into an 
encoded/non-encrypted data streams- 
Fig. 10 a schematic block circuit diagram of a known 
audio encoder, for example, according to the 
standard MPEG layer-3 or according to the 
standard MPEG-2 AAC; and 
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Fig. 11 a schematic block circuit diagram of a known 
audio decoder according to the standard MPEG 
layer-3 or according to the standard MPEG-2 AAC. 

5 

Detailed Description of Preferred Embodiments 

Fig. 1 shows a general block circuit diagram of an 
inventive apparatus 10 for generating an encrypted data 

10 stream representing an audio and/or video signal. The 
apparatus 10 comprises an input 12 and an output 14. An 
encoder 16 is connected between the input 12 and the output 
14 and is coupled with an encryption means 18 in order to 
provide an encrypted data stream at the output of the 

15 apparatus 10 for generating an encrypted data stream, 
having the same data stream syntax as determined or 
demanded by the encoder 16, 

The encryption means 18 and the encoder 16 are coupled in 

20 such a way that the encryption means 18 influences encoder 
internal data (branch 20a) and/or output data of the 
encoder (branch 20b) , however, it merely influences them in 
such a way that the data stream syntax of the data stream 
at the output 14 of the means 10 for generating an 

25 encrypted data stream does not differ from the data stream 
syntax determined by the encoder 16. The influencing by the 
encryption means 18 especially includes changing the 
encoder internal data 20a and/or the output data of the 
encoder 20b in an uniguely reversible way based on a key, 

30 leading to the fact that the encrypted data stream 
generated at the output 14 differs concerning its payload 
information from the payload information of a data stream 
that would be generated by the encoder 16 (by the means 10, 
respectively) if it were not subjected to an influencing by 

35 the encryption means 18. 

As already mentioned, the encoder 16 according to a 
preferred embodiment of the present invention is arranged 



as an audio encoder according to the standard MPEG layer-3 
or according to the standard MPEG-2 AAC . However, the same 
could also be an audio encoder without entropy encoding 
like, for example, according to the standard MPEG layer-2. 
Apart from that, the encoder 16 could also be an encoder 
for voice signals that carries out no encoding in 'the 
frequency range, but an encoding in the time domain, by 
using, for example, prediction or vector quantization 
techniques. The encoder 16 could, of course, also be a 
video encoder compressing video input data in order to 
enable a transmission of those data via bandwidth limited 
transmission channels . 

The encoder 16 can thus be any encoder converting input 
data into encoded output data according to set regulations 
wherein the data stream syntax of the output data is 
defined by the encoder. Usually, a decoder exists for every 
encoder, in such a way that the encoded data stream can be 
decoded again. However, this still means that each encoder, 
will generate a data stream with a predefined data stream 
syntax that has to be predefined that a decoder that is 
mostly complementary to the encoder can decode the encoded 
data stream. However, this is only possible when the 
decoder can understand or interpret the data stream syntax 
of the encoded data stream. Therefore, a predefined data 
stream syntax can be assigned to each encoder for which a 
decoder exists. 

Fig. 2 shows a schematic ■ block circuit diagram of an 
inventive apparatus 30 for generating a decrypted data 
stream. It comprises an input 32 and an output 34. A 
decoder 36 is connected between the input 32 and the output 
34, the decoder being arranged for a predefined data stream 
syntax determined by the encoder 16 (Fig. 1) and that is 
not touched by the encryption means 18 (Fig. 1) according 
to the invention in such a way that the data stream at the 
output 14 of the apparatus 10 for generating an encrypted 
data stream has the same data stream syntax as the data 
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stream at the input 32 of the apparatus 30 for generating a 
decrypted data stream. 

The apparatus 30 for generating a decrypted data stream is 
5 essentially complementary to the apparatus for generating 
an encrypted data stream 10 in such a way that it a'lso 
comprises a decryption means 38 apart from the decoder 36, 
which is again coupled to the decoder 36 in order to 
influence input data into the decoder 36 (branch 40a) or 

10 decoder internal data (branch 40b) based on the key used in 
encrypting in such a way that the changes introduced by the 
means 10 for generating encrypted data streams that have 
been uniquely reversible changes can be reversed in order 
to obtain a decoded and un-encrypted data stream at the 

15 output 34 , 

The inventive concept will be illustrated with the example 
of an audio encoder according to Figs. 1 and 2. In this 
case, a time-discrete audio signal is applied at the input 
20 12 of the apparatus 10 for generating an encrypted data 
stream, that will be encoded by the encoder 16 and that 
will be output at the output 14 of the apparatus for 
generating an encrypted data stream as a bit stream having 
the same bit stream syntax as predefined for the encoder 16 
25 that has, however, been encrypted due to the encryption 
means 18 and especially due to the interference of the data 
via the branches 20a and 20b. The encrypted encoded bit 
stream will be input into the input 32 of the apparatus 30 
for generating a decrypted data stream and decoded again by 
30 the audio decoder 36 in order to again obtain the time- 
discrete audio signal at the output 34. If the apparatus 30 
is authorised for generating a decrypted data stream, i.e., 
if it knows the key used by the encryption means 18, it 
will reverse the encryptions via the branches 40a to 40c in 
35 such a way that the time-discrete audio signal at the 
output 34 of the apparatus 30 for generating a decrypted 
data stream will be an audio signal with full audio 
quality. However, if the apparatus 30 is not authorised. 



i.e., if it does not know the used key, the time-discrete 
audio signal at the output 34 will be an audio signal that 
differs depending on the application more or less from the 
audio signal at the input 12 of the apparatus 10. If the 
data influencing by the encryption means has only been 
limited, the time-discrete audio signal at the output 34" of 
the apparatus 30 for generating a decrypted data stream 
provides a certain audio impression for the non-authorised 
user that might motivate him to obtain the authorisation, 
i.e., the key that the encryption means 18 has used, to 
purchase it in order to obtain the full enjoyment. 

Before several preferred embodiments of the present 
invention will be discussed referring to Figs, 3 to 9, 
first, a known encoding concept will be described referring 
to Fig. 10 and a known decoding concept referring to Fig. 
11 . 

Fig. 10 shows a block circuit diagram for a known audio 
encoder that is, for example, arranged according to the 
standard ISO/IEC 13818-7 (MPEF-2 AAC) . The same comprises 
an audio input 200 and a bit stream output 202. A time- 
discrete audio signal at the audio input 200 is fed into an 
analysis filter bank 204 in order to be mapped into the 
frequency range, such that a set of spectral values will 
result at the output of the analysis filter bank 
representing the short-term spectrum of the audio signal at 
the input 200, i.e., a block of time-discrete audio signal 
samples is converted into a block of spectral values, i.e., 
into a spectral representation, by the analysis filter bank 
200. These spectral values will be quantized in a block 206 
referred to as quantization considering a physcho-acoustic 
model 208 in such a way that a bit saving quantization is 
achieved but that the introduced quantization noise will be 
below the masking threshold of the audio signal at the 
input 200, so that it remains inaudible. 



It is, therefore, a lossy quantization (generally a lossy 
encoding) that does, however, not lead to irritating audio 
influences. The quantized spectral values 206 will be 
subjected to an entropy encoding in a block 210 in order to 
achieve further data compression. The entropy-encoded 
quantized spectral value will finally be lead into a "bit 
stream multiplexer 212 that adds the corresponding side 
information to the entropy-encoded quantized spectral 
values according to the predefined encoder syntax, such 
that an encoded bit stream will be output at the bit stream 
output 202, that has main information as payload 
information in the shape of the entropy-encoded quantized 
spectral values and side information in the shape of side 
information, like scale factors, etc. For further details 
to the single encoding blocks shown in Fig, 10 or regarding 
further blocks not shown there, like, for example, blocks 
for processing stereo signals, etc., please refer to the 
standard ISO/IEC 13818-7 (MPEG-2 AAC) . This standard 
further comprises a detailed illustration of the entropy 
encoding carried out in block 210. It should be noted that 
the inventive concept can also be used with an encoder 
without entropy encoding (MPEG layer-1 and layer-2) and, in 
general, with any encoder generating an encoded data stream 
with a predefined data stream syntax. For the present 
invention, it is especially not relevant how the conversion 
of the time data into the spectral data will be achieved, 
the same can therefore also be applied to the so-called 
sub-band encoders (for example, MPEG-1) . 

Fig. 11 shows a decoder complementary to Fig. 10 that is 
also carried out by the AAC-standard . The same comprises a 
bit stream input 220 coupled with a bit stream 
demultiplexer 222 carrying out a demult iplex-operat ion 
complementary to the bit stream multiplexer 212 (Fig. 10) 
in order to, among other things, feed entropy-encoded 
quantized spectral values into an entropy decoding means 
224 that reverses the entropy encoding introduced in block 
210 (Fig. 10). The now only quantized spectral values will 
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be subjected to an inverse quantization in a block 226 that 
is complementary to the operation carried out in block 206. 
The now again re-quantized spectral values will again be 
converted from the spectral representation into the timely 
5 representation in the synthesis filter bank 228 in order to 
achieve a time-discrete audio signal at an audio output 
230. 

Referring to Fig. 1, it has been stated above that the 
10 inventive apparatus for generating an encrypted data stream 
as it is illustrated schematically in Fig. 1, can influence 
encoder internal data via branch 20a and/or output data of 
the encoder 16 via branch 20b. This will be discussed 
referring to the known encoder that is exemplary 
15 illustrated in Fig. 10, Input data for the encoder are 
time-discrete audio signals. 

The branch 20a shown in Fig. 1 refers to encoder internal 
data. It can be seen from Fig. 10 that encoders can be 

20 constructed from a plurality of subsequent blocks wherein," 
in principle, all input and output data of a block can be 
influenced in a uniquely reversible manner in order to 
obtain an encryption without changing the bit stream 
syntax. Control data, like, for example, control data for 

25 the analysis filter bank 204, the quantization 206, the 
entropy encoding 210, etc., can be influenced in exactly 
the same way. Encoder internal data are therefore not only 
the actual payload data, i.e., the more or less processed 
spectral values, but also the control data that usually 

30 appear as side information in the encoded bit stream. 
Finally, output data of the encoder, i.e., at the output of 
the bit stream multiplexer 212, can be influenced without 
changing the bit stream syntax. In the easiest case, 
entropy encoded words could, for example, be resorted, 

35 i.e., scrambled. The code words can, of course, already be 
scrambled directly before the bit stream multiplexer in a 
uniquely reversible manner based on a key, whereby it 
becomes clear that it is, in principle, irrelevant, whether 



input data of the encoder from Fig. 10, encoder internal 
data or output data of the encoder are influenced by the 
encryption means 18 (Fig. 1). 

It should be noted here that scrambling of single bits of 
entropy code words can lead to a destruction of the data 
stream syntax, since Huffman code words have, for example, 
a different length and an entropy decoder confronted with 
bit-by-bit scrambled code words can very likely not work 
correctly any more, since it is not able to find the 
correct beginning or the correct end of a code word as the 
data stream syntax within the code words is disturbed. 

In the following, reference will be made to Fig, 3 in order 
to explain a preferred embodiment of the present invention 
for the apparatus 10 for generating an encrypted data 
stream. In Fig. 3 as well as in the following Figs., same 
elements have the same reference numbers. Especially, the 
blocks described referring to Figs. 10 and 11 have the same 
reference numbers. 

Fig. 3 shows a preferred embodiment where the encryption 
means 18 merely influences encoder internal data, i.e., 
entropy encoded quantized spectral values. It performs this 
by using a scrambling means in such a way that entropy 
encoded quantized spectral values represented by code words 
will for example be repositioned, i.e., resorted depending 
on a key k. That way, always two adjacent code words could 
be interchanged. This would lead to significant quality 
impairments in the decoded audio signal, but not to the 
fact that a user would obtain no impression of the audio 
signal at all. The scrambling means 180 could, however, 
just as well act on the side information like, for example, 
scale factors depending on the user key k. If entropy- 
encoded quantized spectral values are merely resorted like 
in the embodiment shown in Fig. 3, no change of the length 
of the encrypted data stream at output 14 of the encryption 
apparatus 10 will occur, such that the encoded encrypted 
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data stream fits into the same transmission channel as the 
non-encrypted decoded data stream. 

A further preferred embodiment is shown in Fig. 4 where the 
5 scrambling means 180 is connected between the entropy 
encoder 210 and the quantizer 206. In the easiest case, 
quantized spectral values that have not yet been entropy 
encoded, are scrambled here. This means that contrary to 
Fig. 3, the scrambled quantized spectral values will now be 
10 entropy encoded. 

In the following, a generally known scrambling function, 
which is carried out as a so-called "Seed-Generating" 
algorithm, will be described merely exemplary. Here, a 

15 random number generator is used which detects a random 
number sequence depending on a certain start value, i.e., 
the seed. The significance about this is that the random 
number generator will provide the same random number 
sequence again and again if it gets the same start value, 

20 it will, however, result in a different random number 
sequence if it gets a different start value. In this 
example, the start value would be the key k. The quantized 
spectral values (in Fig. 4) can now be linked bit-by-bit 
with a pseudo random bit sequence via, for example, a XOR 

25 function. Thereby, certain bits of the quantized spectral 
values will be changed, what represents an encryption that 
can only be reversed by an apparatus for generating a 
decrypted data stream comprising the same key, i.e., the 
same start value for its random number generator that again 

30 carries out a XOR link of the quantized spectral values 
with the scrambled quantized spectral values, as it will be 
shown in more detail below. It should be noted that the XOR 
link is only an example for an uniquely reversible change. 
The XOR function has the advantage that a double 

35 application of the same function leads back to the starting 
point such that only one single function and not a first 
function and a second inverse function have to be 



implemented. In principle, every reversible function can be 
used for linking . 

If the encryption means does not influence all the bits of 
a quantized spectral value, but only the least significant 
bits, the encryption will be "softer" in such a way that 
the encrypted audio stream has only been influenced in a 
limited manner and will still have a relatively good 
audible quality. Thus, it can be seen that the intensity of 
the encryption according to the present invention can be 
adjusted almost arbitrarily. If a very massive encryption 
is desired, it is possible to influence the scale factors 
directly. In certain encoding methods, they carry, however, 
the significant intensity information, which is why 
influencing the scale factors can lead to very significant 
impairments of the audio quality. 

In the above, a simple mode of operation of the encryption 
means 18 with the scrambling means 180 has already been 
described. If influencing of the quantized spectral values 
is already carried out before the entropy encoding, this 
will very likely lead to a changed length of the bit stream 
at the output 14 of the apparatus 10, since the quantized 
spectral values changed bit-by-bit, will very likely bring 
about different code words with differing lengths than the 
unscrambled spectral values that would be generated by the 
encoder 16 if no encryption means 18 were present. However, 
if the code words are merely resorted after entropy 
encoding 210, as it is shown in Fig. 3, this will not lead 
to a larger length of the bit stream at the output 14. 

However, many further possibilities exist for influencing 
encoder internal data. In audio encoders according to the 
AAC standard described at the beginning, an entropy 
encoding is carried out that is referred to there as 
"Noiseless Coding". This is used to further reduce the 
redundancy of the scale factors and the quantized spectrum 
of each audio channel. A Huffman encoding method is used as 
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entropy encoding method. Especially, for certain sections 
that can consist of several scale factor bands, respective 
code tables (code books) are used. Especially, 11 different 
normalised code tables exist that can each be uniquely 
identified by a code table number. Thus, the entropy 
encoder 210 associates the respective code table number,* to 
each section that is entropy encoded with the same code 
table. The scrambling means 180 could now already change 
the code table number. However, this change is only 
possible within a limited scope in order to achieve a 
reversible change within the bit stream syntax. In this 
way, code tables exist that can represent signed or 
unsigned n-tupels of quantized spectral values. Above that, 
code tables exist that are four-dimensional or two- 
dimensional. This means that a code word represents four 
quantized spectral values in the case of a four dimensional 
code table or two quantized spectral values in the case of 
a two dimensional code table. 

Some code tables represent a signed entropy encoding of 
spectral values, while other code tables represent an 
unsigned encoding of spectral values. If the code tables 
encode unsigned, the code word is immediately followed by a 
sign bit for each spectral value in the bit stream if the 
respective spectral value is not zero. A decoder can then 
decode the quantized spectral value again due to the 
Huffman code word and the following sign bit. The 
encryption means 18 is adjusted in a preferred embodiment 
of the present invention to carry out a sign change of the 
quantized spectral values that are encoded with unsigned 
code tables. The sign change happens by changing the 
described sign, wherein this change could either be carried 
out according to a certain pattern or by using an XOR link 
of a pseudo random bit sequence with the sign data. This 
way, always the same length of the resulting bit streams 
will be achieved if only those quantized spectral values 
will be influenced that are entropy encoded with unsigned 
code tables. 
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As already mentioned, in the AAC standard, one section, 
i.e. a certain frequency band of the short-term spectrum of 
the audio signal that has at least one scale factor band is 
5 entropy encoded with the same code table. If the scrambling 
means 180 is designed such that it merely carries out a 
resorting of the quantized spectral values in its frequency 
raster without carrying out changes to the quantized 
spectral value, a same length of the output side bit stream 

10 at the output 14 of the apparatus 10 for generating an 
encrypted data stream can be achieved. This is only true, 
when the resorting takes place only within spectral areas 
where the encoding of the quantized spectral values is 
carried out with the same type of entropy encoding, for 

15 example, the same Huffman code book. 

An identical length of the encrypted encoded data stream 
will further be achieved if in the case of using more 
dimensional code tables instead of single quantized 
20 spectral values n-tupel of spectral values are resorted 
together . 

Thus, an encoded encrypted data stream is generated at the 
output 14 of the apparatus 10 for generating an encrypted 
25 data stream having the same data stream syntax as it is 
predetermined for, or by, the encoder 16 and that has, 
above that the same length as a non-encrypted encoded data 
stream in especially preferred embodiments of the present 
invention . 

30 

Corresponding apparatuses 30 for generating a decrypted 
audio and/or video signal are illustrated in Figs. 5 and 6. 
This way, the apparatus 30 outlined in Fig. 5 is 
complementary to the apparatus for generating a decrypted 
35 data stream in Fig. 3. Analogous, the apparatus 30 for 
generating a decrypted audio and/or video signal 
illustrated in Fig. 6 is complementary to the apparatus 10 
for generating an encrypted data stream illustrated in Fig. 
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4. The decryption means 38 in Figs. 5 and 6 comprises a 
means 380 for carrying out an inverse scrambling 

(descrambling) in order to reverse the influences of the 
encoder internal data, i.e., the entropy encoded quantized 
5 spectral values or the quantized spectral values not yet 
entropy encoded, introduced by the scrambling means *180 

(Fig. 3, Fig. 4) , 

Basically, it can be said that the function of the means 
10 380 for inverse scrambling is always complementary to the 
corresponding means 180 for scrambling. The use of a seed 
generating algorithm, i.e., a key-controlled pseudo random 
bit sequence, allows the means 180 and the corresponding 
means 380 to be constructed in exactly the same way and the 
15 key for encrypting to correspond exactly to the key for 
decrypting. Other solutions wherein the encryption means 
180 and the decryption means 380 are constructed 
differently and where the keys for encrypting and 
decrypting are not identical, but in a certain (context to 
20 one another can also be employed as long as the encryption 
means carries out uniquely reversible changes to the 
respective data based on the key and the apparatus for 
generating a decrypted audio and/or video signal can 
reverse the introduced changes based on the key. 

25 

While preferred embodiments of the present invention for 
generating an encrypted data stream at the output 14 that 
generates the encrypted data stream at the output 14 from a 
time-discrete audio signal at the input 12 have been 

30 described referring to Figs. 3 and 4, an inventive 
apparatus for generating e data stream according to another 
embodiment of the present invention that generates the 
encrypted data stream at its output not from a time- 
discrete input signal, but from a differently encrypted 

35 (encoded) data stream will now be described referring to 
Fig. 7 
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The apparatus 70 for generating an encrypted data stream 
shown in Fig. 7 generates a data stream encrypted and 
encoded with a key k2 at its output 72, while it receives a 
data stream encrypted and encoded with a key kl differing 
5 from k2 at its input 74, Now, the apparatus 70 does not any 
longer generate an encrypted data stream from a time- 
discrete audio input signal but, in general, a data stream 
encrypted with another key from a data stream encrypted 
with a first key. Differing from Fig. 1, the apparatus 70 

10 comprises an encryption means 18 and a partial encoder 16*. 
The apparatus 70 further comprises a decryption means 38 
and a partial decoder 36'. Contrary to the embodiments 
described in Figs. 3 and 4, the partial decoder 36' only 
consists of a bit stream demultiplexer 222 and an entropy 

15 decoder 224, while the partial encoder 16' now merely 
consists of an entropy encoder 210 and a bit stream 
multiplexer 212. The encryption means 18 shown in Fig. 7 
influences the input data of the partial encoder 16', while 
analogous the decryption means 38 of Fig. 7 influences the 

20 output data of the partial decoder 36. The output data from 
the partial decoder are the decoder internal data, i.e., 
the data that have been originally influenced in generating 
the encrypted data stream fed into the means 70 according 
to the previous terminology. Analogous, the input data into 

25 the partial encoder of the apparatus 70 are the encoder 
internal data of the encoder that has originally generated 
the encrypted encoded data stream at the input. 

In the following, the mode of operation of the apparatus 70 
30 for generating an encrypted data stream shown in Fig. 7 
will be discussed. At the input 74, the apparatus 70 
receives an encoded data stream encrypted with a key kl 
that has been encrypted in the embodiment shown here in 
such a way that the quantized spectral values have been 
35 scrambled before the entropy encoding or, in general, have, 
in some way, been influenced based on the key kl in a 
reversible manner. At the output of the entropy decoder 
224, the entropy-decoded quantized spectral values that are 
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still encrypted are present that will be decrypted by the 
decryption means 38 based on the key kl by using the means 
380 for carrying out an inverse scrambling in such a way 
that between the part 30' and the part 10' a decoded data 
5 stream will be present that is now, however, no time- 
discrete audio and/or video signal or something similar, 
but comprises quantized spectral values, i.e., encoder 
internal or decoder internal data, in the embodiment shown 
in Fig. 7. The quantized spectral values will be fed into 

10 the encryption means 18 and, especially, into the 
scrambling means 180 in such a way that they will be 
scrambled or, in general, influenced based on a key k2 
different to key kl in order to then be entropy encoded in 
the partial encoder 16*, so that, finally an encoded data 

15 stream encrypted with key k2 will result at the output 70. 
As it can be seen from Fig. 7 that this is a so-called 
"Scrambling Transcoder", i.e., a bit stream converter that 
converts a bit stream encrypted with a key kl directly into 
a bit stream with the key k2 . The same no longer comprises 

20 a full audio decoder or audio encoder, but merely certain 
parts of those that are called partial decoder or partial 
decoder in the sense of this invention. 

Fig. 8 shows a general representation of an apparatus 70' 
25 for generating an encrypted encoded data stream that 
differs only from the apparatus shown in Fig, 7 in that the 
bit stream at the input 74' is an encoded non-encrypted 
data stream that will be decoded by the partial decoder 36' 
and then by the partial encoder and will then be encoded 
30 and encrypted by the partial encoder 16' in connection with 
the encryption means 18 in such a way that an 
encrypted/encoded data stream will result at output 72'. 
The apparatus 70' shown in Fig. 8 could, for example, be 
used to convert a standard bit stream with the predefined 
35 data stream syntax directly into a data stream encrypted 
with a certain key, wherein both data streams have the 
predefined data stream syntax. 



Fig. 9 shows another embodiment of an inventive apparatus 
80 for generating a decrypted data stream with an output 82 
and an input 84, An encoded/encrypted data stream is fed 
into the input 84 which is decrypted by using the means 38 
coupled with the partial decoder 36, so that a decoded 
decrypted data stream will result, that will again be ^ed 
into a following partial encoder 16 in such a way that an 
encoded/non-encrypted data stream results. The apparatus 80 
for generating an encrypted data stream illustrated in Fig. 
9 is thus a bit or data stream converter converting a bit 
stream encrypted with a key kl directly into a standard bit 
stream, i.e., into a bit stream that is non-encrypted and 
has the predefined data stream syntax. 

Differing from the described embodiments for the 
apparatuses 70, 70' and 80, all influencing of encoder 
internal data described in this application can be carried 
out in all described ways. Regarding the above, it is 
obvious that the partial encoder and the partial decoder, 
respectively, can be adjusted to the corresponding 
influencing. If, for example, a resorting of Huffman code 
words has been carried out, a partial decoder could merely 
contain a bit stream demultiplexer, while the partial 
encoder then only comprises a bit stream multiplexer. 
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CLAIMS 

1. Apparatus (10 ) — for generating an encrypted data stream 
from an audio and/or video signal, comprising: 

5 

an encoder ( 16) — for encoding * the audio — and/ or — virico 
signal in order to generate a data stream with a 
predefined data stream syntax as output signal; 



10 an encryption means (18 ) — coupled with the encoder (16) 

for influencing encoder internal data ( 20a) — and/or the 
output — signal — (20b) — — the — encoder — (16) — in a uniquely 
reversible manner based on a key ( kl ) — such that the 
generated encrypted data stream comprises payload 

15 information differing from payload information of a 

data stream that would be generated by the apparatus 
( 10 ) — without the presence of the encryption means (18 ) 
and that the generated encrypted data stream comprises 
the predefined data stream syntax_^ 



20 



wherein said encoder is an encoder for audio signals, 
comprising : 



25 



signal from the time domain 


into a 


spectral 


representation in order to 


obtain 


spectral 



values ; 



a quantizing means for quantizing the spectral 
30 values under consideration of a psychoacoust ic 

model; and 



an entropy encoder arranged to carry out an 
entropy encoding of the quantized spectral values 
35 via a plurality of predefined code tables wherein 

each code table for the entropy encoding of 
quantized spectral values is provided in a 
frequency band and wherein at least one frequency 
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band comprises two or more quantized spectral 
values/ and 

wherein said encryption means is arranged to resort 
5 the two or more quantized spectral values in the 

frequency band comprising two or more quantrzed 
spectral values having an associated code table based 
on the key . 

10 2. Apparatus according to claim 1, wherein said 
encryption means (18 ) — is further arranged to inf luGnco 
resort the two or more quantized spectral values 

encoder — internal — data (20a) — and/ or — fetee — output — data 

(20b) — of the encoder 16 based on the key such that the 

15 encoded data stream has the same bit length as a data 

stream that would be generated by said apparatus (10) 
without the presence of said encryption means. 

3- Apparatus according to one of the prcviouo claimo claim 
20 1, wherein the encryption means ( 18 ) — is arranged in 

order to influence — trhe — encoder — internal — data ( 2Qa) 

and/or the output data — (20b) — of the encoder resort the 
two or more quantized values merely so strongly based 
on the key that the payload information of the 
25 encrypted data stream differs only so strongly from 

the payload information of a data stream that would be 
generated without the presence of the encryption means 
( 18 ) — that a decoder that does not possess the key 
provides a decoded output signal based on the 
30 encrypted data with a quality that is lower than the 

quality that the decoder would provide if he possessed 
the key, wherein however, a minimum quality is 
ensured . 

35 ^4-^: ApparatuG — according — fe-e — efte — — fe^^e — prcviouo — claims , 

v^hercin — said — encryption — means ( 1 8 ) i-s — arranged — 

order — tre — merely — influence — said — encoder — internal — data 
(20a) . 
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&-r 4 . Apparatus according to claimo — 1 — fee — 4 'Claim 1 , 

wherein — fe^^e — cncocicr — i-s — aft — encoder — £-eH? — audio — signalo^ 
comprioing : 

an analyois filter bank — (204 ) — for converting the audio 

oignal from fe^^ie time domain into a opectral 

repreocntation in. order to obtain gpectral values; — and: 

in which the a — quantizing means (206) — — quantizing 

^t4^e opectral values under consideration a 

psychoacoustic model — (208 ) — that generates quantized is 
arranged for generating the spectral values as main 
information and scale factors as side information each 
of which is associated to at least one quantized 
spectral value; and 

wherein in which said encryption means (18 ) — is further 
arranged to influence the scale factors generated by 
said quantizing means (206) — based on the key. 

Apparatus — according — ^ — claims — 1 — fee — 4-? — wherein — said 

encoder is an encoder for audio signals^ — comprising : 

25 an analysis filter bank — (20 4 ) — for converting the audio 

signal — into — a — spectral — representation — — order — fee 
obtain — spectral values; — and 

a — quantizing — means — (206) — fe^ — quantizing — fe+te — spectral 
30 values — under — consideration — of — a — psychoacoustic — model 
(208 ) — that generates quantized spectral values as main 
information and scale factors as side information each 

of — v^?hich — irs — associated — fee — afe least — one — quantized 

spectral — value; — and 

35 

vjherein — said — encryption — means ( 18 ) i-s — arranged — fee 

influence — fe4=ie — quantized — spectral — values — generated — by 
said means — (206) — for quantizing. 



10 



15 
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Apparatus according fee claim 67 wherein oaid 

encryption — meano Hr8-) arranged fee rcoort fei^ 

quantized opectral valuco based on the — key . 

5 

^5 . Apparatus according to claims — 6 — ene — 7- claim 1 , whefein 
said encryption means is arranged to link e^t — least 
part of the quantized spectral values in the frequency 
band^ which includes two or more spectral values with 
10 a pseudo random bit sequence generated based on the 

key as start value via an EXCLUSIVE-OR-link, 



-9^6 . Apparatus according to claims — 6 — fee — 8 -claim 1 , wherein 
merely least significant bits of spectral values are 
15 linked with a pseudo random bit sequence. 



4r0^2jL Apparatus according to claims — 6 — fee — 9 claim 1 , 

wherein said quantized spectral values are signed and 
wherein said encryption means ( 18 ) — is further arranged 
20 to change the signs of quantized spectral values based 

on the key. 



^r^r^ Apparatus — according — fee — claims — 6 — fee — 3r9-?^ — v^hcrcin — said 

encoder (16) further — comprises — ec¥t — entropy — encoder 

25 (210) that i-s arranged fee carry e«-t an entropy 

encoding ef fehe quantized spectral values vie a 

plurality of predefined code tables. 

-3r^8 . Apparatus according to claim ^1^, wherein said 

30 entropy encoder (210) is arranged such that it 

comprises at least one code table which is an unsigned 
code table such that a sign for a code word from the 
code table is written separately from the code word 
into the payload information, wherein said encryption 
35 means ( 1 8 ) — is further arranged to change the sign of 

at least one quantized spectral value based on the key 
before said entropy encoding of said quantized 
spectral values. 
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Apparatus — according — ^ — claimo — tl — e-r — 3r5-? — wherein — each 

code — table — — t4=te — entropy — encoding — — fe4=^e — quantized 
opectral value io provided in a certain frequency band 
5 with at leaot one opectral value^ — wherein at — Icaot one 

frequency — band — he-s — twe — ©-r — more — quantized — opectral 

valueo — aftd^ — vjherein — oaid — encryption — meano Hr«^ is- 

arranged to — reoort — th^ — fewe — or more — quantized — opectral 

valueo ift — tfee frequency — band — having — fewe &^ — more 

10 quantized opectral valueo baocd on the key. 



i4^9_^ Apparatus according to claimo — ^ — — 3r^ claim 1 , 

wherein at least one code table of the plurality of 
code tables is a multidimensional code table, wherein 

15 a code word represents a plurality of quantized 

spectral values, wherein said encryption means ( 18 ) — is 
arranged to resort groups of quantized spectral 
values, wherein one group of spectral values has so 
many quantized spectral values as encoded by a code 

20 word of said multidimensional code table. 

■i^' Apparatus — according — tro — claimo — 1 — t-e — 3-f wherein — 

output — data — — oaid — encoder — (16) — comprioe — a — ocquencc 
^ef — code — wordo , — wherein — oaid — oequence — — code — wordo 
25 repreoento — etn — entropy — encoded — veroion — ef^ — t4^e — audio 

and/or — video — oignal, wherein — oaid — encryption — meano 

( 18) — io arranged for influencing the output data — (20b) 
of — oaid — encoder — ift — order — trs — reoort — t^^e — oequence — a# 
code vjordo baoed on the — key . 

30 

16. 10. Apparatus according to one ef th^ prcviouo 

claimo claim 1 , wherein said encoder has a plurality of 
sub-blocks (20 4 — te — 210) — connected with a bit stream 
multiplexer (212 ) — multiplexing the data output from 
35 the single sub-blocks according to the predefined data 

stream syntax in order to obtain the output data of 
said encoder — ( 16) . 



11. Apparatus (70 ) for generating a data stream 

encrypted based on a second key ( ]c2 ) — from a first data 
stream encrypted based on a first key — ( kl) , wherein 
said first data stream is an audio and/or video signal 
encoded by using an encoder with a predefined data 
stream syntax, wherein said first data stream* is 
encrypted such that — encoder — internal — data — have — been 
influenced — based — en — the — first — key — (kl) that two or 
more quantized spectral values in a frequency band 
comprising two or more quantized spectral values and 
having an associated code table have been resorted 
based on the first key, wherein after the resorting an 
entropy encoding of the quantized spectral values has 
been carried out via a plurality of predefined code 
tables, wherein each code table is provided for the 
entropy encoding of quantized spectral values in a 
frequency band and wherein at least one frequency band 
comprises the two or more quantized spectral values, , 
comprising : 

a partial decoder ( 36 M — for reversing part of the 
encoding such that the influenced — encoder — internal 
data resorted two or more spectral values are present; 

aft decryption means (38 ) — for decrypting ti^e — encoder 
internal data the resorted two or more spectral values 
by reversing the resorting based on the the first key 

an encryption means ( 18 ) — for influencing t-he — encoder 
internal data the sequence of the two or more spectral 
values of the frequency band that has an associated 
code table based on the second key — ( k2 ) ; 

a partial encoder (16' ) — for carrying out part of the 
encoding that has been reversed by the partial decoder 
(36 ' ) — in order to generate the data stream encrypted 



based on the second key — ( k2) , wherein the second data 
stream has the predefined data stream syntax. 



12 . Apparatus ( 70 ' ) for generating a second data 

stream encrypted based on a key ( kl ) from a data 

stream, wherein said first data stream is an aixdio 
and/ or — video — signal encoded using an encoder with a 
predefined data stream syntax, comprising: 

a partial decoder (36 ' ) — for reversing part of the 

encoding such that encoder internal data fee be 

influenced — quantized spectral values of the audio 
signal are present; 

an encryption means ( 18 ) — for — influencing — t4^e — encoder 
internal — data — based — ob — a — key — (kl) resorting two or 
more quantized spectral values in a frequency band 
comprising two or more spectral values based on the 
first key, wherein one of a plurality of predefined 
code tables is associated to the frequency band for 
the entropy encoding, wherein each code table is 
provided for an entropy encoding of quantized spectral 
values in a frequency band and wherein at least one 
frequency band comprises the two or more quantized 
spectral values, wherein the encryption means is 
arranged to resort the quantized spectral values that 
have the same associated code table ; 

a partial encoder ( 16 ' ) — for carrying out part of the 
encoding that has been reversed by the partial decoder 
( 36 ' ) — in order to generate the data stream encrypted 
based on the key — ( kl ) , wherein the second data stream 
has the predefined data stream syntax, 

13 ■ Apparatus ( 8 0 ) — for generating a decrypted data 
stream from a first data stream encrypted based on a 
key — ( kl ) , wherein said first data stream is an audio 
and/or — video — signal with a predefined data stream 
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syntax encoded by using an encoder, wherein said first 
data stream is encrypted such that encoder — internal 

data ha-s been influenced at least two or more 

quantized spectral values in a frequency band have 
5 been resorted based on the first key (kl) wherein a 

plurality of predefined code tables for an entropy 
encoding is associated with the frequency band whose 
quantized spectral values have been resorted, wherein 
each code table for the entropy encoding is provided 
10 for the entropy encoding of quantized spectral values 

in a frequency band and wherein at least one frequency 
band comprises the two or more quantized spectral 
values, — comprising: 



15 a partial decoder (36 ' ) — for reversing part of the 

encoding such ,that the influenced — encoder — internal 
data — resorted two or more quantized spectral values 
are present, wherein the resorted two or more 
quantized spectral values belong to a frequency band 

2 0 that has an associated code table arc prcocnt ; 

a decryption means ( 38 ) — for decrypting ^ferhe — encoder 
internal — data — the resorted two or more quantized 
spectral values by reversing the resorting based on 
the key (kl) ; 

a partial encoder ( 16 ' ) — for carrying out part of the 
encoding that has been reversed by the partial decoder 
(36 ' ) — in order to generate the second data stream with 
the predefined data stream syntax. 



25 



30 



g-Q^ 14 . Apparatus according to claims — ^ — fee — l-9 claim 11 , 
wherein said partial decoder (36 ' ) — has a bit stream 

demultiplexer (222) , wherein said encoder internal 

35 data are the output data from the bit stream 

demultiplexer — ( 222 ) . 
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5 ^15 . Apparatus according to claim ^14 , wherein said 

partial decoder (36 ' ) further comprises an entropy 

decoder (22 4 ) — following the bit stream demultiplexer 
(222) , wherein said encoder internal data are the 
5 output data from the entropy decoder — (224 ) , 

^ ^16 , Apparatus according to claims 1^7 te 3^9 11, 

wherein said encoder internal data a^^e quantized 

opcctral — values — and/or — scale factors are influenced 
10 apart from the two or more quantized spectral values . 

^^ ^11 • Apparatus (30) — for generating a decrypted audio 
and/or — video — signal from an encrypted data stream 
rcprcGcnting — aft — audio — and/or — video — signal comprising 

15 quantized spectral values of an audio signal being 

resorted and afterwards entropy encoded within a 
frequency band in a uniquely reversible manner, 
wherein the frequency band is defined that it has an 
associated code table from a plurality of code tables 

20 for the entropy encoding , wherein the encrypted data 

stream comprises payload information differing from 
payload information of a non-encrypted data stream and 
wherein said encrypted data stream comprises the same 
data stream syntax as a non-encrypted data stream, 

25 comprising: 

a decoder (36) — for decoding input data in order to 
generate decoded output data , wherein the decoder 
comprises an entropy decoder for reversing the entropy 
30 encoding in order to obtain the resorted quantized 

spectral values ; and 

a decryption means (38) — for influencing t-he — encrypted 

data — stream ( 4 0a) and/or — e^ — encoder — internal data 

35 (40b) — the resorted spectral values based on a key in 
order to reverse the uniquely reversible changes 
resorting which has^v^ been carried out in an apparatus 



for generating an encrypted data stream in order to 
obtain the decrypted audio and/or video signal- 



Apparatus according te claim 2^-? v^hcrcin said 

encrypted — data — stream — comprises — quantized — spectral 
values — which — have — been — influenced — by — etn — encryption 
means ; — aft^ 

wherein — said — decryption — moans (38 ) ts — arranged — ift 

order — te — reverse — t4^e — influencing — — tke — quantized 
spectral values. 

Apparatus — according to claim 2 4 , — vjhcrein said decoder 

(36) — comprises : 

^« — entropy — decoder f5-4^ &eHE — reversing — said — entropy 

encoding — i-R — order — fee — obtain — tke — influenced — quantized 
spectral values, 

5^-= Apparatus — according to — claim 2 4 , — wherein — said decoder 

(36) — further comprises : 

^^^^ — entropy — decoder (22 4 ) fo^ — reversing — fe+te — entropy 

encoding into v^hich ti^e uninfluenced quantized 

spectral values can be fed, 

wherein — said — encryption — means ( 38 ) i-s — arranged — ift 

order fee reverse fehe influencing of fe4^e entropy 

encoded spectral values. 

^^ 18 * Apparatus (30) — according to claims 23 to 26 claim 
1/7, wherein said decoder further comprises: 

a plurality of functional blocks coupled with a bit 

stream demultiplexer (222 ) conducting parts of the 

data stream to the single blocks according to the 
predefined data stream syntax. 
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^ ^19 , Apparatus (30) — according to clQimo — 23 to 27 claim 
18 , wherein said decoder (36) — further comprises: 

a synthesis filter bank — (228) in order to convert a 
5 spectral representation of the audio and/or — video 

signal into a timely or local representation. 



2-9-^ 20 . Method for generating an encrypted data stream 

rcprcgcnting from an audio and/ or video signal, 

10 comprising : 



15 



encoding — (16) — — enrt — input — signal — ift — order — fee — generate 
e^i — encoded — data — stream with — a — predefined — data — stream 
syntax as output signal; 

wherein — during — th^^ — step — o^ — encoding — and/or — after — feh^ 
stop — ef^ — encoding — feh^ — f ollovjing — step — v^ill — fee — carried 
out : 

20 influencing — e-§ — data — during — the — encoding — ef^ — encoder 
internal data — (20a) — and/or the output signal — (20b) — tft 
a uniquely reversible manner based on a key, — such that 
t4^e — generated — encrypted — data — stream — comprises — payload 
information — differing — from — payload — information — — a 

25 data — stream — that — Vi/ould — be — generated — by — feke — step — e# 
encoding vjithout the — step of — influencing and that — 

generated encrypted ' data ^ — stream comprises ^rh^ 

predefined data stream syntax, comprising: 



30 encoding the audio signal in order to generate a data 

stream with a predefined data stream syntax as output 
signal ; 



encrypting encoder internal data by influencing the 
35 same in a uniquely reversible manner based on a key 

such that the generated encrypted data stream 
comprises payload information differing from payload 
information of a data stream that would be generated 
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without the step of encrypting and that the generated 
encrypted data stream comprises the predefined data 
stream syntax, 

5 wherein in the step of encoding an audio signal is 

encoded, comprising : 

converting the audio signal from the time domain 
into a spectral representation in order to obtain 
10 spectral values; 

quantizing the spectral values under 

consideration of a psychoacoustic model; and 

15 entropy encoding of the spectral values via a 

plurality of predefined code tables wherein each 
code table for the entropy encoding of quantized 
spectral values is provided in a frequency band 
and wherein at least one frequency band comprises 

20 two or more quantized spectral values, and 

wherein said step of encrypting is carried out to 
resort the two or more quantized spectral values 
in the frequency band comprising two or more 
2 5 quantized spectral values having an associated 

code table based on the key. 



21. Method for generating a second data stream encrypted 
30 based on a second key from a first data stream 

encrypted based on a first key, wherein said first 
data stream is an audio signal with a predefined data 
stream syntax encoded by using an encoder, wherein 
said first data stream is encrypted such that two or 
35 more quantized spectral values in a frequency band 

comprising two or more quantized spectral values and 
having an associated code table have been resorted 
based on the first key, wherein after the resorting an 
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entropy encoding of the quantized spectral values has 
been carried out via a plurality of predefined code 
tables, wherein each code table is provided for the 
entropy encoding of quantized spectral values in a 
5 frequency band and wherein at least one frequency band 

comprises the two or more quantized spectral valu'fes, 
comprising : 

reversing part of the encoding such that the resorted 
10 two or more spectral values are present; 

decrypting the resorted two or more spectral values by 
reversing the resorting based on the first key; 



15 encrypting by influencing the sequence of the two or 

more spectral values of the frequency band that has an 
associated code table based on the second key; 

carrying out the part of the encoding that has been 
20 reversed by the step of reversing in order to generate 

the data stream encrypted based on the second key, 
wherein the second data stream has the predefined data 
stream syntax. 

25 22. Method for generating a second data stream encrypted 
based on a key from a first data stream, wherein said 
first data stream is an audio signal with a predefined 
data stream syntax encoded by using an encoder, 
comprising : 

30 

reversing part of the encoding such that quantized 
spectral values of the audio signal are present; 

encrypting by resorting two or more quantized spectral 
3 5 values in a frequency band comprising two or more 

spectral values based on the first key, wherein one of 
a plurality of predefined code tables is associated to 
the frequency band for the entropy encoding, wherein 
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each code table is provided for an entropy encoding of 
quantized spectral values in a frequency band and 
wherein at least one frequency band comprises the two 
or more quantized spectral values, wherein the 
5 encryption means is arranged to resort the quantized 

spectral values that have the same associated code 
table; 

carrying out part of the encoding that has been 
10 reversed by the partial decoder in order to generate 

the data stream encrypted based on the key, wherein 
the second data stream has the predefined data stream 
syntax . 

15 23. Method for generating a decrypted data stream from a 
first data stream encrypted based on a key, wherein 
said first data stream is an audio signal with a 
predefined data stream syntax encoded by using an 
encoder, wherein said first data stream is encrypted 

20 such that at least two or more quantized spectral 

values in a frequency band have been resorted based on 
the first key, wherein a plurality of predefined code 
tables for an entropy encoding is associated with the 
frequency band whose quantized spectral values have 

25 been resorted, wherein each code table for the entropy 

encoding of quantized spectral values is provided in a 
frequency band and wherein at least one frequency band 
comprises the two or more quantized spectral values, 
comprising : 

30 

reversing part of the encoding such that the resorted 
two or more quantized spectral values are present, 
wherein the resorted two or more quantized spectral 
values belong to the frequency band that has an 
35 associated code tables- 

decrypting the resorted two or more quantized spectral 
values by reversing the resorting based on the key; 
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carrying out part of the encoding that has been 
reversed by the step of reversing in order to generate 
the second data stream with the predefined data stream 



-^0-^ 2 4 , Method for generating a decrypted data 
Gtroam audio signal — from an encrypted data stream 

rcprcgcnting — aft — audio — and/ or — video — signal, wherein 

10 said encrypted data stream comprioco payload 

information — differing — from — payload — information — — a 
non encrypted — data — stream — and — wherein — said — encrypted 
data stream has — the same data — stream syntax ao a non - 
encrypted data stream, — comprising : 

15 

decoding — (36) — of input data in order to obtain decoded 
output data; — a^^ 



wherein — fe^^e — following — step — ±-s — carried — oirt — before — the 
2 0 step of decoding and/or during the step of decoding: 

influencing — (^«-) — the input data — (40a) — and/or the data 

( 40b) during — t^^e — decoding — based — en — a — leey — used — fo^ 

encoding — ouch — that — the — encrypted — data — stream will — be 

25 decrypted comprising quantized spectral values of an 

audio signal being resorted and afterwards entropy 
encoded within a frequency band in a uniquely 
reversible manner, wherein the frequency band is 
defined by having an associated code table from a 

30 plurality of code tables for the entropy encoding 

wherein the encrypted data stream comprises payload 
data differing from payload data of a non-encrypted 
data stream and wherein the encrypted data stream 
comprises the same data stream syntax as a non- 

35 encrypted data stream, comprising: 



decoding input data in order to generate decoded 



output data, wherein in the step of decoding an 
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entropy encoding for reversing 


the entropy encoding is 


carried out in order to obtain 


the resorted quantized 


spectral values; and 




decrypting by influencing the resorted quantized 


spectral values based on a key 


in order to reverse *the 


uniquely reversible resorting 


that has been carried 


out by generating an encrypted 


data stream in order to 



obtain the decrypted audio signal . 

10 

25. Apparatus for generating an encrypted data stream from 
an audio signal, comprising: 

an encoder for encoding the audio signal in order to 
15 generate a data stream with a predefined data stream 

syntax as output signalm- 
an encryption means coupled with the encoder for 
influencing encoder internal data of the encoder in a 
20 uniquely reversible manner based on a key such that 

the generated encrypted data stream comprises payload 
information differing from payload information of a 
data stream that would be generated by the apparatus 
without the presence of the encryption means and that 
25 the generated encrypted data stream comprises the 

predefined data stream syntax, 

wherein said encoder is an encoder for audio signals, 
comprising : 

30 

an analysis filter bank for converting the audio 



35 



signal from the time domain into a 


spectral 


representation in order to obtain 


spectral 


values ; 




a quantizing means for quantizing the 


spectral 


values under consideration of a psychoacoust ic 


model; and 
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an entropy encoder arranged to carry out an 
entropy encoding of the spectral values in order 
to obtain a seguence of code words wherein the 
5 seguence of code words represents an entropy 

encoded version of the audio signal, and 

wherein said encryption means is arranged to 
resort the seguence of code words by changing an 
10 order of code words based on the key. 

26. Apparatus according to claim 25, wherein said 
encryption means is arranged in order to resort the 
code words based on the key merely so strongly that 

15 the payload information of the encrypted data stream 

differs only so strongly from the payload information 
of a data stream that would be generated without the 
presence of the encryption means that a decoder that 
does not possess the key provides a decoded output 

20 signal based on the encrypted data with a guality that 

is lower than the guality that the decoder would 
provide if he possessed the key, wherein however, a 
minimum guality is ensured. 

25 27. Apparatus according to claim 25, wherein always two 
adjacent code words are exchanged with each other. 



28. Apparatus for generating a data stream encrypted based 
on a second key from a first data stream encrypted 

30 based on a first key, wherein said first data stream 

is an audio signal with a predefined data stream 
syntax encoded using an encoder, wherein said first 
data stream is encoded such that a seguence of code 
words generated by entropy encoding of guantized 

35 spectral values has been resorted by changing an order 

of code words based on the first key, comprising: 
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a partial decoder for reversing part of the encoding 
such that the resorted sequence of code words is 
present ; 

5 a decryption means for reversing the resorting based 

on the first key ; 



an encryption means for resorting the sequence of code 
words based on the second key by changing an order of 
10 code words; 

a partial encoder for carrying out part of the 
encoding that has been reversed by the partial decoder 
in order to generate the data stream encrypted based 
15 on the second key, wherein the second data stream has 

the predefined data stream syntax. 



29- Apparatus for generating a second data stream 
encrypted based on a key from a first data stream, 
20 wherein said first data stream is an audio signal with 

a predefined data stream syntax encoded by using an 
encoder, comprising : 

a partial decoder for reversing part of the encoding 
2 5 such that a sequence of code words generated by 

entropy encoding of quantized spectral values is 
present ; 

an encryption means for resorting the sequence of code 
30 words based on the key by changing an order of code 

words ; 



a partial encoder for carrying out part of the 
encoding that has been reversed by the partial decoder 
35 in order to generate the data stream encrypted based 

on the key, wherein the second data stream has the 
predefined data stream syntax. 
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10 



30, Apparatus for generating a decrypted data stream from 
a first data stream encrypted based on a key, wherein 
said first data stream is an audio signal with a 
predefined data stream syntax encoded by using an 
encoder, wherein said first data stream is encrypted 
such that a sequence of code words generated" by 
entropy encoding of quantized spectral values has been 
resorted by changing an order of code words based on 
the first key, comprising: 

a partial decoder for reversing part of the encoding 
such that the resorted sequence of code words is 
present; 

15 a decryption means for reversing the resorting of the 

sequence of code words based on the key; 

a partial encoder for carrying out part of the 
encoding that has been reversed by the partial decoder 
20 in order to generate the second data stream with the 

predefined data stream syntax. 

31. Apparatus for generating a decrypted audio signal from 
an encrypted data stream comprising a sequence of code 

25 words generated by entropy encoding of quantized 

spectral values resorted in a uniquely reversible 
manner by changing an order of the code words wherein 
the encrypted data stream comprises payload data 
differing from payload data of a non-encrypted data 

30 stream and wherein the encrypted data stream comprises 

the same data stream syntax as a non-encrypted data 
stream, comprising : 

a decoder for decoding input data in order to generate 
35 decoded output data; and 



a decryption means for influencing the resorted 
sequence of code words based on a key in order to 
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reverse the resorting that has been carried out in an 
apparatus for generating an encrypted data stream in 
order to obtain the decrypted audio signal. 

32. Method for generating an encrypted data stream from an 
audio signal, comprising: 

encoding the audio signal in order to generate a data 
stream with a predefined data stream syntax as output 
signal ; 

encrypting by influencing encoder internal data in the 
step of encoding in a uniquely reversible manner based 
on a key such that the generated encrypted data stream 
comprises payload information differing from payload 
information of a data stream that would be generated 
by the apparatus without the presence of the 
encryption means and that the generated encrypted data 
stream comprises the predefined data stream syntax, 

wherein the step of encoding comprises: 

converting the audio signal from the time domain 
into a spectral representation in order to obtain 
spectral values; 

quantizing the spectral values under 

consideration of a psychoacoustic model; and 

entropy encoding the spectral values in order to 
obtain a sequence of code words wherein the 
sequence of code words represents an entropy 
encoded version of the audio signal, and 

wherein in said step of encrypting based on the key 
the sequence of code words is resorted by changing an 
order of code words. 
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33. Method for generating a data stream encrypted based on 
a second key from a first data stream encrypted based 
on a first key, wherein said first data stream is an 
encoded audio signal with a predefined data stream 
syntax, wherein said first data stream is encrypted 
such that a sequence of code words generated " by 
entropy encoding quantized spectral values has been 
resorted by changing an order of code words based on 
the first key, comprising: 

reversing part of the encoding such that 'the resorted 
sequence of code words is present; 

reversing the resorting based on the first key; 

decrypting by resorting the sequence of code words 
based on the second key; 

carrying out part of the encoding that has been 
20 reversed in the step of reversing in order to generate 

the data stream encrypted based on the second key, 
wherein the second data stream has the predefined data 
stream syntax. 



15 



25 34. Method for generating a second data stream encrypted 
based on a key from a first data stream, wherein said 
first data stream is an audio signal encoded using an 
encoder with a predefined data stream syntax, 
comprising : 

30 

reversing part of the encoding such that a sequence of 
code words generated by entropy encoding of spectral 
values is present; 



35 



encrypting by resorting the sequence of code words 
based on the key by changing an order of code words; 
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carrying out part of the encoding that has been 
reversed by the step of reversing in order to generate 
the data stream encrypted based on the key, wherein 
said second data stream has the predefined data stream 
5 syntax . 

35, Method for generating a decrypted data stream from a 
first data stream encrypted based on a key, wherein 
said first data stream is an encoded audio signal with 
10 a predefined data stream syntax, wherein said first 

data stream is encrypted such that a sequence of code 
words generated by entropy encoding spectral values 
has been resorted based by changing an order of code 
words on a first key, comprising: 

15 

reversing part of the encoding such that the resorted 
sequence of code words is presents- 
decrypting by reversing the resorting of the sequence 

20 of code words based on the keys- 

carrying out part of the encoding that has been 
reversed by the step of reversing in order to generate 
the second data stream with the predefined data stream 

25 syntax , 

36, Method for generating a decrypted audio signal from an 
encrypted data stream comprising a sequence of code 
words generated by entropy encoding quantized spectral 
30 values resorted by changing an order of code words in 

. a uniquely reversible way wherein the encrypted data 
stream comprises payload data differing from payload 
data of a non-encrypted data stream and wherein the 
encrypted data stream comprises the same data stream 
35 syntax as a non-encrypted data stream, comprising: 



decoding input data in order to generate decoded 



output data; and 
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decrypting by influencing the resorted sequence of 
code words based on a key in order to reverse the 
resorting that has been carried out in generating an 
5 encrypted data stream in order to obtain the decrypted 

audio signal. 
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Apparatuo Device and Method for Producing an Enco ded Audio 

and/or Video Data Stream Generating an Encrypted Data 
atream and Apparatuo and Method for Concrating a DcerYptcd 

Audio and/or Video Signal 



Abstract 



An apparatus (10) for generating an encrypted data stream 
representing an audio and/or video signal comprises an 
encoder (16) for encoding an input signal (12) to generate 
a data stream with a predefined data stream syntax as 
output signal. The apparatus further comprises an 
encryption means -fi«-) — coupled with the decoder -fi^^ — in 
15 order to influence encoder internal data (20q) — and/or the 
output signal (20b) of the encoder in a uniquely reversible 
manner based on a key such that the generated encrypted 
data stream comprises payload information differing from 
payload information of a data stream that would be 
20 generated by the apparatus without the presence of an 
encryption means and that the generated encrypted data 
stream comprises the predefined data stream syntax. 
Thereby, a flexible data stream encryption is achieved, 
wherein the degree of encryption can be freely selected 
25 such that the owner of a decoder who does not possess the 
key, still obtains a rough idea of the audio and/or video 
signal which might cause him to buy the key in order to 
hear or view the audio and/or video signal in its full 
quality. The encoder-specific encryption and decryption 
concept can be implemented into already existing 
encoders/decoders with little effort. 



